Technology (Consumer Data Protection)

passed · New York · Senate May 12, 2026

S 4413: Relates to deletion of a consumer's financial information after cancellation of an automatic renewal or continuous service

Requires a business to delete a consumer's financial information after cancellation of an automatic renewal or continuous service, unless such consumer has affirmatively consented to retention of such financial information; requires such business to notify such consumer of such deletion.

Topics ✓ TechnologySupports TechnologyRequires deletion of consumer financial data after service cancellation, directly enhancing data privacy protections per topic indicators.95% confidence

Sub-Topics Consumer Data Protection

Track

in committee · New York · Assembly Jan 7, 2026

A 2348: Requires providers to share electronic health records with plans for purposes of improving patient care and reducing administrative delays

This bill requires hospitals and healthcare providers to share complete electronic medical records with insurance plans' utilization review agents. It mandates that records be shared electronically for individual care reviews and claim processing only, not for billing audits or historical analysis. Health plans must prioritize data security, follow privacy laws, and cannot request duplicate information already in the shared records. The law also restricts plans from routinely demanding full medical records or diagnosis codes during reviews, limiting requests to only necessary information. It directly affects hospitals, healthcare providers, and health insurance plans operating in New York.

Topics ✓ HealthcareSupports HealthcareMandates secure electronic sharing of records to reduce administrative delays and improve patient care coordination, aligning with support indicators like streamlined access and provider- insurer collaboration.95% confidence ✓ TechnologySupports TechnologyMandates data security and privacy compliance for electronic health record sharing, aligning with data privacy protections in technology policy.95% confidence

Sub-Topics Insurance Consumer Data Protection

Track

in committee · New York · Assembly Jan 7, 2026

A 5585: Establishes central depository databases for governmental real property transaction records and data

Bill A 5585 requires state and county governments to create centralized digital databases for governmental real property records using blockchain technology. It mandates storing records on a "federated blockchain" with tokenization and digitalization to ensure data security, immutability, and accessibility. The system must be "redundant, permissioned, and secure," providing access to state agencies, local municipalities, and taxpayers. This applies specifically to government-owned property records, not private real estate transactions.

Topics ✓ TechnologySupports TechnologyMandates blockchain for secure, immutable government data storage, enhancing cybersecurity and data privacy standards through mandated technology adoption.90% confidence

Sub-Topics Consumer Data Protection Emerging Technology

Track

in committee · New York · Assembly Jan 7, 2026

A 7754: Requires e-mail service providers to implement a procedure to authenticate an individual's identity when such individual creates an e-mail account

Requires e-mail service providers to implement a procedure to authenticate an individual's identity when such individual creates a new e-mail account.

Topics ✓ TechnologySupports TechnologyMandates identity authentication for email accounts, enhancing cybersecurity measures per topic indicators.92% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Assembly Jan 7, 2026

A 4047: Relates to prohibiting the release of consumption data

Prohibits the release of a consumer's electrical or gas consumption data to any police officer, or private, local, state or federal law enforcement entity without a judicial court-ordered subpoena, warrant or the consumer's written consent.

Topics ✓ TechnologySupports TechnologyProhibits unauthorized law enforcement access to consumer utility data, strengthening data privacy protections per topic description.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 6867: Relates to the sale of personal information by an internet service provider

S 6867 requires internet service providers (ISPs) in New York to keep subscribers' personal information confidential unless the subscriber explicitly grants written or electronic permission to share it. The bill defines personal information broadly to include names, addresses, financial details, health data, online activity, and email addresses. ISPs must notify subscribers of these privacy rights and cannot charge extra fees for choosing not to share personal information. Subscribers can specifically request that their email address be kept confidential, and ISPs must honor such requests. Violations would result in fines of $500 to $1,000 per offense.

Topics ✓ TechnologySupports TechnologyBill mandates ISPs to protect subscriber data privacy via explicit consent, broad personal information definition, and prohibits opt-out fees - clearly advancing data privacy protections.95% confidence

Sub-Topics Consumer Data Protection Data Privacy

Track

in committee · New York · Senate Jan 7, 2026

S 8004: Prohibits the use of biometric surveillance system or biometric surveillance information in places of public accommodation

Prohibits the use of biometric surveillance system or biometric surveillance information in places of public accommodation; prohibits entering into any agreement that authorizes any third party to use any biometric surveillance system or biometric surveillance information; provides penalties for violations.

Topics ✗ TechnologyOpposes TechnologyProhibits biometric surveillance systems in public spaces, directly restricting a specific technology application to protect privacy.90% confidence

Sub-Topics Consumer Data Protection

Track

passed · New York · Senate May 6, 2026

S 1551: Relates to prohibiting the release of consumption data

Prohibits the release of a consumer's electrical or gas consumption data to any police officer, or private, local, state or federal law enforcement entity without a judicial court-ordered subpoena, warrant or the consumer's written consent.

Topics ✓ Criminal JusticeSupports Criminal JusticeProhibits warrantless law enforcement access to consumer data, protecting civil rights and limiting overreach in criminal investigations.90% confidence ✓ TechnologySupports TechnologyBill explicitly protects consumer data privacy by requiring warrants/consent for energy consumption data disclosure, directly aligning with data privacy indicators in technology policy.95% confidence

Sub-Topics Courts Policing Consumer Data Protection

Track

in committee · New York · Senate Jan 7, 2026

S 4270: Relates to establishing the online consumer protection act

Relates to establishing the online consumer protection act; defines terms; provides that an advertising network shall post clear and conspicuous notice on the home page of its own website about its privacy policy and its data collection and use practices related to its advertising delivery activities; makes related provisions.

Topics ✓ TechnologySupports TechnologyMandates clear privacy notices and data practices for advertising networks, directly protecting consumer data privacy per bill summary.95% confidence

Sub-Topics Consumer Data Protection Data Privacy Tags Consumer Protection

Track

in committee · New York · Senate Apr 16, 2025

S 7426: Relates to the unlawful use of a New York driver's license or identification card

This bill regulates how businesses and other entities in New York State can scan and use an individual's driver's license or identification card. It prohibits scanning the machine-readable zone of these IDs unless for specific purposes, such as verifying identity for non-cash transactions, confirming age for restricted goods, or preventing fraud. The bill limits collected data to name, address, date of birth, and ID number, and generally prohibits retaining, selling, or sharing this information with third parties for marketing or other unrelated purposes. Exceptions allow data use for legally required transmissions or to specific entities like consumer reporting agencies, and violations can result in a civil penalty of up to $1,000.

Topics ✓ TechnologySupports TechnologyProhibits unauthorized scanning/retention of ID data, limiting collection to protect privacy per bill's core provisions on data handling.92% confidence

Sub-Topics Consumer Data Protection

Track